shield Security update for ntp

SUSE-SLE-Module-Legacy-15-2018-2431

NTP was updated to 4.2.8p12 (bsc#1111853): - CVE-2018-12327: Fixed stack buffer overflow in the openhost() command-line call of NTPQ/NTPDC. (bsc#1098531) - CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection (bsc#1083424) Please also see https://www.nwtime.org/network-time-foundation-publishes-ntp-4-2-8p12/ for more information.

• Release Date
  Oct 24 2018
• References
  Bugzilla: 1083424, 1098531, 1111853
  CVEs: CVE-2018-12327, CVE-2018-7170
• Type
  security
• Severity
  moderate

cloud_download Downloads

Legacy Module 15 aarch64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-4.3.2 lock rpm lock src

Legacy Module 15 x86_64

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-4.3.2 lock rpm lock src

Legacy Module 15 ppc64le

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-4.3.2 lock rpm lock src

Legacy Module 15 s390x

• Packages
  ntp
  Network Time Protocol daemon (version 4)

  4.2.8p12-4.3.2 lock rpm lock src